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1 . A hierarchical memory structure for use in matching a data string having a plu- 

2 rality of fields, the associative memory structure comprising; 

3 a top-level associative memory; and 

4 at least one next-level associative memory operably coupled to the top-level asso- 

5 dative memory so as to receive an output therefrom, wherein 

6 the top-level associative memory is configured to receive and match one 

7 or more of the fields of the data string and, in response to detecting a match, pro- 

8 viding an output to the next-level associative memory, and 

9 the at least one next-level associative memory is configured to receive and 
10 match the output from the top-level associative memory plus one or more other 

fields of the data string or one or more values derived therefrom and, in response 
to detecting a match, outputting a result. 
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2. The hierarchical memory structure of claim 1 wherein the data strings being 
p 2 matched are network messages. 



1 3. The hierarchical memory structure of claim 2 wherein the one or more fields 

2 input to the top-level associative memory include an Internet Protocol (IP) address field. 



1 4. The hierarchical memory structure of claim 1 wherein the top-level associative 

2 memory and next-level associative memory are each ternary content addressable memo- 

3 ries (TCAMs) that support don't care values. 



1 5. The hierarchical memory structure of claim 4 wherein the data strings being 

2 matched arc network messages. 
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1 6. The hierarchical memory structure of claim 5 wherein the one or more fields 

2 input to the top-level associative memory include an Internet Protocol (IP) address field. 

1 ^y/. The hierarchical memory structure of claim 1 wherein the output of the top- 

2 level associative memory that is received by the at least one next-level associative mem- 

3 ory has a length that is shorter than a length of the one or more fields of the data string 

4 that are input into the top-level associative memory. 

1 ^\ j>. The hierarchical memory structure of claim ^/wherein the length of the output 

2 of the top-level associative memory is on the order of one-fourth or less of the length of 

3 the one or more fields of the data string that are input into the top-level associative mem- 

4 ory. 

The hierarchical memory structure of claim /further comprising a first mem- 

2 ory structure associated with the top-level associative memory, the top-level associative 

3 memory and first memory structure configured such that, in response to detecting a match 

4 to an entry in the top-level associative memory, the top-level associative memory speci- 

5 fies a location of the first memory structure containing the output that is provided to the 

6 at least one next level associative memory. 

11/ <0/ 

1 KJ. The hierarchical memory structure of claim # further comprising a message 

2 buffer for temporarily storing the data string, and buffer control logic for providing se- 

3 lected fields from the message buffer to the top-level and next-level associative memo- 

4 ries. 

1 Vf. The hierarchical memory structure of claim 1 further comprising: 
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a first memory structure associated with the top-level associative memory, the 
top-level associative memory and first memory structure configured such that, in re- 
sponse to detecting a match to an entry in the top-level associative memory, the top-level 
associative memory specifies a location of the first memory structure containing the out- 
put that is provided to the at least one next level associative memory; and 

a second memory structure associated with the at least one next-level associative 
memory, the next-level associative memory and second memory structure configured 
such that, in response to detecting a match to an entry in the next-level associative mem- 
ory, the next-level associative memory specifies a location of the second memory struc- 
ture containing information related to the matching next-level associative memory entry. 

19- 

The hierarchical memory structure of claim M wherein the first and second 
memory structures are random access memories (RAMs). 

\3 

1 The hierarchical memory structure of claim J^wherein the data strings being 
matched are network messages and the one or more fields input to the top-level associa- 
tive memory include an Internet Protocol (IP) address field. 

i^H^The hierarchical memory structure of claim Lo wherein the output of the first 
RAM has a length that is shorter than the IP address input into the top-level associative 
memory. 

^5/The hierarchical memory structure of claim yl wherein the length of the out- 
put of the top-level associative memory is on the order of one-fourth or less of the length 
of the one or more fields of the data string that are input into the top-level associative 
memory. 
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/ Jf6. The hierarchical memory structure of claim 4 further comprising a plurality of 
records organized into common fields, wherein 

at least one field of each record, which originally contained a corresponding 
value, is replaced with a unique coordinate value (UCV) that has been generated for the 
corresponding value, and 

each UCV is shorter than the corresponding value that it replaces. 

17. The hierarchical memory structure of claim 1 further comprising a plurality of 
records organized into common fields, wherein 

at least one field of each record, which originally contained a corresponding 
value, is replaced with a unique coordinate value (UCV) that has been generated for the 
corresponding value, and 

each UCV is shorter than the corresponding value that it replaces. 

18. A method for loading a hierarchical, associative memory structure with a plu- 
rality of records, each record organized into common fields having values and/or don't 
cares, so that a data string, also having a plurality of fields, may be compared with the 
contents of the memory structure in order to identify a matching record, the method com- 
prising the steps of: 

identifying the coordinate sub-fields of at least one selected field of the records, 
the selected field having distinct values or don't cares; 

determining the number of distinct values that each coordinate sub-field has; 

for each coordinate sub-field, computing the minimum number of bits needed to 
individually represent each of the distinct values and don't care, if present, for the re- 
spective coordinate sub-field; 

assigning a unique coordinate value (UCV), that falls within the previously com- 
puted minimum number of bits, for each distinct value and don't care, if present; 
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for each record, generating a unique coordinate value sequence (UCVS) by con- 
catenating the UCVs assigned to the distinct values and don't care, if present, of the re- 
spective record; and 

loading the hierarchical, associative memory structure with the generated UCVSs. 

19. The method of claim 18 wherein a coordinate sub-field is defined as having 
either all distinct values or all don't cares for all records. 

20. The method of claim 19 wherein the records are access control entries (ACEs) 
of at least one access control list (ACL). 

21 . The method of claim 20 wherein the selected field corresponds to an Internet 
Protocol (IP) address field. 

22. An apparatus for loading a hierarchical, associative memory structure with a 
plurality of records, each record organized into common fields having values and/or don't 
cares, so that a data string, also having a plurality of fields, may be compared with the 
contents of the memory structure in order to identify a matching record, the method com- 
prising the steps of: 

means for identifying the coordinate sub-fields of at least one selected field of the 
records, the selected field having distinct values or don't cares; 

means for determining the number of distinct values that each coordinate sub- 
field has; 

for each coordinate sub-field, means for computing the minimum number of bits 
needed to individually represent each of the distinct values and don't care, if present, for 
the respective coordinate sub-field; 
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13 means for assigning a unique coordinate value (UCV), that falls within the previ- 

14 ously computed minimum number of bits, for each distinct value and don't care, if pres- 

15 ent; 

16 for each record, means for generating a unique coordinate value sequence 

17 (UCVS) by concatenating the UCVs assigned to the distinct values and don't care, if pre- 

1 8 sent, of the respective record; and 

19 means for loading the hierarchical, associative memory structure with the gener- 

20 ated UCVSs. 



1 23. A computer readable medium containing executable program instructions for 

2 loading a hierarchical, associative memory structure with a plurality of records, each rec- 

3 ord organized into common fields having values and/or don't cares, so that a data string, 

4 also having a plurality of fields, may be compared with the contents of the memory 

5 structure in order to identify a matching record, the executable program instructions 

6 comprising steps for: 

7 identifying the coordinate sub-fields of at least one selected field of the records, 

8 the selected field having distinct values or don't cares; 

9 determining the number of distinct values that each coordinate sub-field has; 

10 for each coordinate sub- field, computing the minimum number of bits needed to 

1 1 individually represent each of the distinct values and don't care, if present, for the re- 

12 spective coordinate sub-field; 

13 assigning a unique coordinate value (UCV), that falls within the previously com- 

14 puted minimum number of bits, for each distinct value and don't care, if present; 

15 for each record, generating a unique coordinate value sequence (UCVS) by con- 

16 catenating the UCVs assigned to the distinct values and don't care, if present, of the re- 

17 spective record; and 

1 8 loading the hierarchical, associative memory structure with the generated UCVSs. 
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